Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Priority MEDIUM 47

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service condition and execution of ar…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02579 Published 2020-04-03 No fix listed CWE-121
Priority LOW 35

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decrypti…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01116 Published 2020-04-03 No fix listed CWE-922
Priority LOW 34

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attack…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00251 Published 2020-04-03 No fix listed CWE-326
Priority LOW 38

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privil…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00372 Published 2020-04-03 No fix listed CWE-276
TI-2020-05656 CVE-2020-7008 · GHSA-r83v-qp7q-q6cf

Path traversal in VISAM VBASE Editor

Priority LOW 37

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01907 Published 2020-04-03 No fix listed CWE-23